NoExec partitions

Hardened partition structure

Exemple

Mount           Filesystem  Size
---------       ----------  -------
/               btrfs       20 Go
/var            ext4        20 Go
/var/log        xfs         20 Go
/opt            ext4        10 Go
/srv            xfs         6 Go
/home           xfs         5 Go
/usr/local      ext4        5 Go
none            swap        4 Go

/etc/fstab sample

UUID=xxxx  /           btrfs  defaults                                   1   1
UUID=xxxx  /var        ext4   noexec,nodev,nosuid,defaults               0   0
UUID=xxxx  /var/log    xfs    noexec,nodev,nosuid,defaults               0   0
UUID=xxxx  /opt        ext4   nodev,nosuid,defaults                      0   0
UUID=xxxx  /srv        xfs    nodev,nosuid,defaults,ro                   0   0
UUID=xxxx  /home       xfs    noexec,nodev,nosuid,defaults               1   1
UUID=xxxx  /usr/local  ext4   nodev,nosuid,defaults                      0   0
UUID=xxxx  none        swap   defaults                                   0   0
tmpfs      /tmp        tmpfs  noexec,nodev,nosuid,size=1G,defaults       0   0
tmpfs      /dev/shm    tmpfs  noexec,nodev,nosuid,size=32M,defaults      0   0
proc       /proc       proc   defaults,hidepid=2                         0   0